[ad_1]
Joe Biden signed an executive order on Wednesday in an attempt to strengthen U.S. cybersecurity defenses after colonial pipeline attacks, including destructive hacking, exposed the weaknesses of businesses and governments.
“Recent cybersecurity incidents. . . they remind us that public and private sector entities in the U.S. are increasingly sophisticating the malicious cyber activities of nation-state agents and cybercriminals, ”the White House said.
Under the order, federal agencies will need to include multi-factor authentication in their systems and encrypt all data within six months to make it more difficult for hackers to access their IT infrastructure.
The order also requires IT providers who enter into a contract with the government to meet higher security requirements and be notified if their systems are breached. Depending on the severity of the incident, there would be strict deadlines for deployment on a sliding scale, a senior administration official said.
A pilot of the new star rating system for software sold to the government will also be launched so that officials and citizens can judge the security.
Measures SolarWinds hackin which Russian hackers targeted dozens of businesses for Spanish campaigns that hijacked American-made software, as well as the U.S. Department of Commerce and Finance.
It was learned earlier this year that they were also hackers backed by Chinese states management covert attacks on multiple targets, exploiting recently known vulnerabilities in Microsoft software.
The order came after a group of cyber criminals carried out a ransomware attack by Colonial on May 7 after the collapse of a key East Coast pipeline, caused by a shortage of gasoline and fuel. 5,500 mile piping system operations resumed on Wednesday.
“These incidents have common features, including poor cybersecurity defenses, making public and private sector entities more vulnerable to riots,” the White House said.
In an effort to alleviate the government’s cyber defenses, the order seeks to introduce a “game book” on how government agencies should respond to incidents and improvements in records and information sharing after violations.
It also sets up a public-private sector committee, which will appoint a cybersecurity security review committee to review major cyber incidents and make recommendations to prevent them from happening again.
The commission, which is a model for the National Transportation Safety Commission that investigates plane and train accidents, would first review the SolarWinds hack, a senior administration official said.
[ad_2]
Source link
